CVE-2023-22933

creationtimestamp| type| source ---|---|--- 2023-02-14 20:35:46+00:00| seen| https://t.me/cibsecurity/58122 2023-02-16 11:40:08+00:00| seen| https://t.me/truesecator/4074...

CVE-2023-22933 Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting XSS in an extensible mark-up language XML View through the ‘layoutPanel’ attribute in the ‘module’ tag’...

CVE-2023-22933

CVE-2023-22933 affects Splunk Enterprise: versions prior to 8.1.13, 8.2.10, and 9.0.4 expose a Cross-Site Scripting (XSS) vulnerability in an XML View via the layoutPanel attribute on the module tag. The issue arises in Splunk Web-enabled deployments and could allow client-side code execution. Re...